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CLAIMS 

1. A method of authenticating 
customer (41) to a service provid^ 
steps of 

forming a plurality of set£ (1) of randomly 
generated code words (2) , 

storing one of said plurality of code word sets (1) 
in a memory circuit (15) of jk mobile telephone (10) , 
10 which circuit is associated/ with a mobile -telephone 
subscription, 

storing an identical /code word set (1) in a database 
(21) together with an association to said mobile- 
telephone subscription, /and - 
15 at the time of requesting the commission, 

identifying said mobile- telephone subscription, 
retrieving at least gfne code word (46) from the memory 
circuit and checking^ the presence of said code word in 
the code word set (p.) in the database that is associated 
20 with said mobile- telephone subscription, thereby 
authenticating the? commission. 

2 . A methocy as claimed in claim 1 , wherein the code 
word is retrieved from the memory circuit (15) in a 
predetermined sequence known to the database . 

2 5 3. A methjbd as claimed in claim 2, further 

comprising the /step of registering, in at least in one of 
the memory circuit (15) and the database (21) , when a 
code word (4 6^ has been used, thus ensuring said 
predetermined sequence is followed. 
30 4. A TTTjethod as claimed in any one of the preceding 

claims, wherein the step of identifying the mobile- 
telephone subscription comprises the steps of 

determining the identity of the customer, and, 
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based on the . identity of th£ customer, identifying 
the mobile -telephone subscription . 

5. A method as claimed in/ any one of the preceding 
claims, wherein a request (45)/to provide a code word is 
sent to the customer. 

6. A method as claimed yin claim 5, wherein the 
request (45) is sent to the mobile telephone (10) via the 
telecommunication network. 

7. A method as claimed in claim 5 or 6, wherein the 
code word is transmitted from the mobile telephone (10) 
to the database (21) via/the telecommunication network. 

8. A method as claimed in claims 1-3, wherein 

the identity (43) /of the customer and the code word 
(4 6) retrieved from tMe memory circuit are transferred to 
the service provider /( 42) , 

the mobile -telephone subscription associated with 
the customer is identified by the service provider, and 

the code worcy (46) and the identity (23) of the 
mobile -telephone Subscription are transferred to the 
database by the service provider. 

9 . A method as claimed in any one of the preceding 
claims, wherei^ a second code word (46 ,f ) is retrieved 
from the memo:tfy circuit (15) and is transferred to the 
database (21)/ to further authenticate the commission. 

10. A thethod as claimed in claim 9, wherein the 
code words in the set are connected to one another in 
groups (3),/ said first (46 ! ) and said second (46' 1 ) code 
words being included in the same group of code words. 

11. I A method as claimed in claims 9-10, wherein 
said first code word (46 ') is transferred from the 
customer/ (41) to the database (21) , the database sends a 
request /(45) to the customer to provide said second code 



WO 01/26061 



PCT/SEOO/01842 



10 



v 



15 



20 



25 



30 



32 

word (46" '), and said second cople word is transferred 
from the customer to the database (21) 

12. A method as claimed jjn any one of the preceding 
claims, further comprising the J steps of 

associating at least one position indication 
(24) with the mobile- telephone subscription and storing 
said indication (24) in the database (21) , and, 

each time a commission is I requested, establishing 
the location of the memory circuit (15) and checking the 
position indication thus obtaiJned against said position 
indication (24) stored in the /database . 

13 . A method of authenticating a commission from a 
customer to a service provider, wherein a set (1) of 
randomly generated code words! (2) has been stored in a 
memory circuit (15) associated with a mobile -telephone 
subscription in a mobile telephone (10) as well as in a 
database (21) together with sn association (23) to said 
mobile-telephone subscription, comprising the steps of 

establishing the identity (43) of the customer, 
identifying the mobile- t elephone subscription on the 
basis of the identity of the customer, 

retrieving a code word {46) from the memory circuit, 

and 

checking the presence o| said code word in the code 
word set (22) in the database (21) that is associated 
with said mobile- telephone subscription, in order to thus 
authenticate the commission, 

14. A system for authenticating a commission from a 
customer (41) to a service pjrovider (42) , comprising 

a mobile telephone (10)1 having a memory circuit (15) 
associated with a mobile- telephone subscription, 

means to enable the customer to disclose his 
identity (43) to the service provider, 
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characterized in that thp system further comprises 
a database (21) , 

a set (1) of randomly generated code words (2) , said 
set stored in the fir^t place in the memory circuit (15) 
and in the second plAce in the database (21) , where it is 
associated with th^ mobile- telephone subscription, 

means to identify the mobile- telephone subscription 
based on the identity (43) of the customer, 

means to enable the customer (41) to retrieve a code 
word from the rrvemory circuit (15) and to transfer said 
code word to t/ie database (21) , and 

checking /means (2 5, 26) for checking that said code 
word is present in the code word set (22) in the database 
that is associated with said mobile- telephone 
subscript io/i/ in order to thus authenticate the 
commission/ 

15. # system as claimed in claim 14, wherein said 
checking Aneans comprises a communication means (25) for 
communication between the database (21) and the mobile 
telephone (10) 




